Quantum secure communication protocols based on entanglement swapping 
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We present a quantum secure direct communication protocol and a multiparty quantum secret 
sharing protocol based on Einstein-Podolsky-Rosen pairs and entanglement swapping. The present 
quantum secure direct communication protocol makes use of the ideal of block transmission. We 
also point out that the sender can encode his or her secret message without ensuring the security of 
the quantum channel firstly. In the multiparty quantum secret sharing protocol, the communication 
parties adopt checking mode or encoding mode with a certain probability. It is not necessary for 
the protocol to perform local unitary operation. In both the protocols, one party transmits only one 
photon for each Einstein-Podolsky-Rosen pair to another party and the security for the transmitting 
photons is ensured by selecting Z-basis or X-basis randomly to measure the sampling photons. 

PACS numbers: 03.67.Dd, 03.67.Hk 



Quantum cryptography has been one of the most 
promising applications of quantum information science. 
It utilizes quantum effects to provide unconditionally se- 
cure information exchange. Quantum key distribution 
(QKD) which provides unconditionally secure key ex- 
change has progressed quickly ^11,13, 111- In recent years, 
a good many of other quantum cryptography schemes 
have also been proposed and pursued, such a s q uantum 
secret sharing (QSS) |1 i, i, [13, III fl| quan- 
tum secure direct communication (QSDC) IirL llM . llTl 

EEHsQllIilllllllilllllll. QSS is the generaliza- 
tion of classical secret sharing to quantum scenario and 
can share both classical and quantum messages among 
sharers. Many works have been carried out in both theo- 
retical and experimental aspects after the pioneering QSS 
scheme proposed by M. Hillery et al. in 1999 (hereafter 
called HBB99)(5|. We can classify the QSS schemes as 
schemes using entanglement or schemes without entan- 
glement. The HBB99 scheme is based on a three-particle 
entangled Greenberger-Horne-Zeilinger (GHZ) state. A. 
Karlsson et al. proposed a QSS scheme using two-particle 
Bell states @. Based on multi-particles entangled states 
and teleportation, we presented a multiparty QSS scheme 
of QSDC 8). G. P. Guo and G. C. Guo presented a QSS 
scheme where o nly product states are employed Z. 
J. Zhang et al. |l3| proposed a QSS scheme using single 
photons. QSDC's object is to transmit the secret mes- 
sage directly without first establishing a key to encrypt 
them, which is different to QKD. QSDC can be used in 
some special environments which has been shown by K. 
Bostroem et al. and F. G. Deng et al.^^ 0. Many 
researches have been carried out in QSDC. These works 
can also be divided into two types, one utilizes single 
photon s [r^ llsL ll^ ■ the other utilizes entangled state 

llllillilllalllllillllilll^ F. G. Deng et al. 

proposed a QSDC scheme using batches of single pho- 



tons which serves as one-time pad |l3. Q- Y. Cai et 
al. presented a deterministic secure direct communica- 
tion scheme using single qubit in a mixed state We 
proposed a QSDC scheme based on order rearrangement 
of sing le photons The QSDC scheme using entan- 

glement state is certainly the mainstream. K. Bostroem 
and T. Felbinger proposed a "Ping-Pong" QSDC proto- 
col which is quasi-secure for secure direct communication 
if perfect quantum channel is used Q. Y. Cai et al. 
pointed out that the " Ping-Pong" Protocol is vulnerable 
to denial of service attack or joint horse attack with in- 
visible photon I23, . They also presented an improved 
protocol which doubled the capacity of the " Ping-Pong" 
protocol '2^1. F. G. Deng and G. L. Long put forward a 
two-step QSDC protocol using Einstein-Podolsky-Rosen 
(EPR) pairs 0. We presented a QSDC scheme using 
EPR pairs and teleportation "2l"| and a multiparty con- 
trolled QSDC scheme using GHZ states 22]. 

Entanglement swapping can entangle two quantum 
systems that do not have direct interaction with each 
other. It plays an important role in quantum infor- 
mation. There are also many quantum cryptography 
schemes using entanglement swapping. Z. J. Zhang et 
al. presented a multiparty QSS scheme ^3 and a QSDC 
scheme based on entanglement swapping and local uni- 
tary operations [29l |. Y. M. Li put forward a multiparty 
QSS of quantum information by swapping quantum en- 
tanglement Based on entanglement swapping, T. 
Gao et al. proposed two QSDC schemes using GHZ states 
and Bell states, respectively |33,l^- We first describe 
entanglement swapping simply. The four Bell states are 



|<^±) = -^(|00)±|11)), 
|V'±) = -^(|01)±|10)). 



(1) 



* Electronic address: |jwang@nudt.edu.cn| 



Suppose two distant parties, Ahce and Bob, share l^fj) 
and 101^4) where Alice has qubits 1 and 4, and Bob pos- 
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sesses 2 and 3. Note that 

+ IV'^4>IV'2+3> + IV^r4)IV'23>- (2) 

After Bell basis measurement on qubits 1 and 4, the state 
of the qubits 1, 2, 3, 4 collapses to |0]'4)|'/'23)' \4'i4)\4>23) ^ 
\tl'i4)\ip23) ^^"i IV'i4)IV'23) &Sich with probabihty 1/4. If 
Alice and Bob share other Bell states, similar results can 
be achieved. We give the relations used in our paper, as 

lfe>®l'/'^4> = ^(l0f4)lfe> + |</'r4)l02+3) 
+ IV^r4)IV^2+3> + IV'^4>l'/'2"3>, 

+ 1^1+4)10^3) -Ife) 102^3), 
1^1-2)^10^4) = ^(1014)1^-2+3) -I^m)!^) 

+ 1^1-4)10^3) -1^1+4)102^3), (3) 

We then present a QSDC protocol using EPR pairs and 
entanglement swapping. Suppose the sender Alice wants 
to transmit her secret message directly to the receiver 
Bob. 

(1) Alice prepares an ordered TV EPR pairs. Each of 
the EPR pairs is in the state |0^2)- We denotes the or- 
dered N EPR pairs with {[Pi(l),Pi(2)], [P2(1),P2(2)], 

[PAr(l),Pjv(2)]}, where the subscript indicates the 
order of each EPR pair in the sequence, and 1, 2 repre- 
sents the two-photon of each pair. Alice takes one pho- 
ton from each state to form an ordered partner photon 
sequence [Pi(l), P2(l),---, Pjv(l)]j called Si sequence. 
The remaining partner photons compose S2 sequence, 
[Pi(2), P2(2),---, PAr(2)]. Bob also prepares N EPR 
pairs each of which is in the state |0j^4) . In the same way, 
Bob divides the N EPR pairs into S3 sequence, [Pi(3), 
P2(3),---, Pjv(4)] and ^4 sequence, [Pi(4), P2(4),- • • , 
Pat (4)]. Alice then sends the 5*2 sequence to Bob. Bob 
sends the S4 sequence to Alice at the same time. 

(2) After confirming the two parties have received 
the photon sequence, Alice selects randomly a suffi- 
ciently large subset from the photon sequence for eaves- 
dropping check. She chooses randomly one of the 
two measuring basis Z-basis (|0), |1)) and X-basis 
(l+) = 7f (|0) + |1)),|-) = ;^(|0)-|1))) to measure the pho- 
ton 1. She then tells Bob the positions of the sampling 
photons, the measuring basis she has chosen and her mea- 
surement result. Bob measures the photon 2 in the same 
measuring basis as Alice and compares his result with 
Alice's. He thus can evaluate the error rate of the trans- 
mission of the 5*2 sequence. To ensure the security of the 
transmission of the 6*4 sequence, Alice and Bob utilize the 
same method to check eavesdropping. If the error rate 
exceeds the threshold, they abort the protocol. Other- 
wise, they continue to the next step. 



(3) After ensuring the security of the EPR pairs, Alice 
encodes her secret message on the photon 1. She per- 
forms one of the four unitary operations 

/=|0)(0| + |1)(1|, 

a. = |0)(l|-|-|l)(0|, 

za, = |0)(l|-|l)(0|, 

a. = |0)(0|-|l)(l|. (4) 

on the photon 1, according to her secret message. The 
operations /, ax , iCy and Uz denote secret message "00" , 
"01", "10" and "11", respectively. Alice then performs 
Bell basis measurement on the photons 1 and 4 and pub- 
lishes her measurement results. 

(4) Bob measures the photons 2 and 3 in the Bell basis. 
Because of the operation / {ax, iay, a^ ) performed on 
the photon 1, the state |0^2) changed to j^^j) (1^-12)' 
1^12)' I0r2))- Note that the equations |21 and |3| Bob can 
then deduce Alice's secret according to his result and 
Alice's result, as illustrated in Tabel 1. For example, if 
Alice's result is IV'14) and Bob's result is 10^3), Alice's 
secret must be "01" . That is to say Alice performed ax 
operation on the photon 1. 



TABLE I; The recovery of Alice's secret message 



Alice's secret 


{Alice's result, Bob's result} 


00 (7) 


{I0i>, \& {101-4), l02-3>} 

{iv-i), 1^2+3)} iV'2-3)} 


01 


{i0i), 1^2+3)} {101-4), IV'2-3>} 

{iv-i), 102+3)} {iv-iD, 102-3)} 


10 (iay) 


{101-4), l^2'3)} {I0i), IV'2-3>} 
{IV-lD, 102+3)} {IV-i), l02-3>} 


11 (a,) 


{I0i>, !02-3)} {101-4), I0i>} 
1^2+3)} {IV'1+4), IV'2-3)} 



The security for the present protocol is the same as 
that for BBM92 protocol. To ensure the security of the 
transmission of the S2 and 54 sequence, the communica- 
tion parties perform Z-basis or A-Basis measurements on 
the sampling photons, which is similar to that of BBM92 
protocol. Only after confirming the security of the quan- 
tum channel could Alice encode her secret message on the 
photon 1 and announce her measurement result. Thus 
our protocol is unconditional secure. 

Actually, in the present QSDC scheme, Alice can en- 
code her secret message directly on the EPR pairs with- 
out ensuring the security of the quantum channel firstly. 
Alice prepares a batch of EPR pairs each of which is in 
one of the four Bell states according to her secret mes- 
sage. The states 10"''), |0~), IV'"'') and ji/i") represent the 
secret message "00", "01", "10" and "11", respectively. 
Alice inserts randomly some sampling EPR pairs in the 
encoding sequence for eavesdropping check. Similar to 
the step 2 in the present protocol, Alice and Bob chooses 
randomly Z-basis or A-basis to measure the sampling 
photons. Only after confirming the security of the quan- 
tum channel could Alice publish her results of Bell basis 
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measurement. After obtaining Alice's results, Bob can 
then recover her secret message. 

We then present a multiparty QSS protocol using EPR 
pairs and entanglement swapping. We first present a 
three-party QSS protocol and then generalize it to a mul- 
tiparty QSS one. Suppose Alice want to share a random 
key with Bob and Charlie. 

(1) Alice, Bob and Charlie agree that the four Bell 
states l^"*"), IV'''') and represent the two-bit 
information "00", "01", "10" and "11" , respectively. 

(2) Alice (Bob, Charlie) prepares an EPR pair in the 
state \(j)i2) (l<^3"4): I'/'s'e))- Alice (Bob, Charlie) send the 
photon 2 (4, 6) to Bob (CharHe, Alice). 

(3) Alice chooses one of the two modes, checking mode 
with probability p and encoding mode with probability 
1— p. If Alice selects checking mode, the procedure goes 
to (C4), otherwise they perform the step (E4). 

(C4) Bob performs Z-basis or X-basis measurement 
randomly on the photon 2 and informs Alice the measur- 
ing basis he has chosen and his measurement result. Alice 
then measures the photon 1 in the same measuring basis 
as Bob and compares her result with Bob's. The method 
of eavesdropping check is similar to that of BBM92 pro- 
tocol, which ensures the security of the transmission of 
the photon 2. If there is no eavesdropper, their results 
should be accordant. The same method is used to check 
the security of the transmission of the photon 6. To pre- 
vent a dishonest party's attack and ensure the security of 
the transmission of the photon 4, Alice selects randomly 
Bob or Charlie to choose a random measuring basis {Z- 
basis or X-basis) to measure the photon and then publish 
his or her corresponding measurement result. If there is 
no eavesdropping, they return to the step 1. Otherwise, 
the protocol is aborted. 

(E4) Alice (Bob, Charlie) performs Bell basis measure- 
ment on the photons 1 and 6 (2 and 3, 4 and 5). According 
to Eq. 121 and 13 we can obtain 

10+ ) ® !</>+) ® |<^+) = + |</'^6)|023)l<^45) 

+ I</'^6)IV'2+3)IV'4'5) + 1-^^6)1^)1^) 
+ \^l&)\<t>t^)\^A^) + \^w)\^2:i)\^t5) 
+ l</'r6) 1^)1^25) + l<^r6)IV'2'3)l^4"5) 
+ \i^t^)\^t^)\i^t,) - IV'1+6)I</'2"3)IV'4"5) 
+ \i^t^)\^4zM,) - l^i+6)IV^2"3)l'/'r5) 
+ IV'r6)l</'^3)IV^4'5) - \'<Pw)\^tz)\i^i5) 

+iV'r6)iV'2"3) 104+5) - \i^i^Mt3m,))- 



After the three-party's Bell basis measurements, the state 
of the photons 1, 2, 3, 4, 5, 6 collapses to one of the 
sixteen states in the Eq. [Slwith probability 1/16. Alice 
can then share a random key with Bob and Charlie, as 
illustrate in Table 2. Suppose Bob's result is |V>J5) and 
Charlie's result is \(t)4^)- If Bob collaborates with Charlie, 
they can deduce that Alice's result is \(t>iQ) according to 



Eq. Thus Alice shares two-bit secret "01" with Bob 
and Charlie. 



TABLE II: The establishment of sharing secret key 



Alice's result 


{Bob's result, Charlie's result} 


the sharing key 


\<f>t,) 


{\<f>ti), |0i)} l'^4"5)} 
{\^t,), IV'4+5)} {te), IV'4'5>} 


00 


I0r6> 


m-i), i<^4"5)} i<^i,)} 

{te), l^4'"5)} ICs)} 


01 




{l<^i), l^4+5>} {lfe), fe)} 

{|V'2+3>, I0i)} {IV'a'a). Ife)} 
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{lfe), 1^-4+5)} {Ht',), IV'4-5>} 
{\^2Z). {1^-2+3). 1-^4-5)} 
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We then analyze the security of the three-party QSS 
protocol. Each of the communication parties transmits 
only one photon for each EPR pair. The communica- 
tion parties selects randomly one of the two measur- 
ing basis (Z-basis and AT-basis) to check eavesdropping. 
This method for eavesdropping check is similar to that of 
BBM92 protocol, which is proved to be unconditionally 
secure. As long as the security of the transmission of the 
photons 2, 4, 6 is ensured, the present protocol is secure. 
The attack of Eve or a dishonest parties will be detected 
in the checking mode. 

The three-party QSS protocol can be easily general- 
ized to a multiparty one. Suppose Alice want to share 
a random secret key with Bob, Charlie, Dick, • • • , York 
and Zach. Each of the communication parties prepares 
an EPR pair in the state |0+) and sends one photon of 
the EPR pair to the next party. That is to say Alice 
send one photon to Bob, Bob send one photon to Char- 
lie, • • • , York sends one photon to Zach and Zach send one 
to Alice. Similar to the three-party QSS protocol, Alice 
chooses checking mode and encoding mode with proba- 
bility p and 1 — p, respectively. In the checking mode, 
the communication parties utilizes random Z-basis and 
A-basis measurement to ensure the security of the trans- 
mitting photons. In the encoding mode, each of the com- 
munication parties performs Bell basis measurement on 
their two photons. Thus if only Bob, Charlie, • • • , York 
and Zach collaborate, they can share a random key with 
Alice. The details of the multiparty QSS protocol is very 
similar to that of the three-party one. And the security 
for the multiparty QSS protocol is the same as that for 
three-party one. 

So far we have presented a QSDC protocol and a multi- 
party QSS protocol using entanglement swapping. Both 
the protocols utilizes EPR pairs to achieve secure infor- 
mation exchange. The communication parties transmit 
only one photon for each EPR pair in the two protocols 
and utilize random Z-basis or X-basis measurement to 
ensure the security of the transmitting photon. Different 
to Ref. [23, both the parties prepares a batch of EPR 
pairs in our QSDC protocol. We also point out that the 
sender Alice can encode her secret message on the EPR 



4 



pairs without ensuring the security of the quantum chan- 
nel firstly. In our multiparty QSS protocol, different to 
Ref. 12], the parties share a random secret key without 
performing local unitary operations, which simplifies the 
protocol. 
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